{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:00:57Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20071128-CVE-2007-6190","slug":"cisco-sa-20071128-cve-2007-6190","vendor":"Cisco","title":"Cisco Unified IP Phone Extension Mobility Monitoring Vulnerability","summary":"Cisco Unified IP Phone devices contain a vulnerability that could allow an authenticated, remote attacker to eavesdrop on ongoing conversations around an affected device, potentially resulting in a disclosure of sensitive information. The vulnerability exists due to insecure handling of the Extension Mobility feature.  An authenticated, remote attacker could exploit this vulnerability by configuring an affected device to send out a continuous Real Time Protocol (RTP) stream to an attacker-controlled location.  This ongoing transmission could allow the attacker to monitor conversations that are happening in the physical space around the affected device. Cisco has confirmed this vulnerability in a security response; however, updates are not available. To exploit this vulnerability, an attacker must possess Extension Mobility credentials that are sufficient to allow authentication to the affected device.  Only devices with the Extension Mobility feature enabled, along with the built-in web service, are vulnerable to an attack.  Additionally, attackers can only attack Extension Mobility-enabled phones that a user is not logged in to.  A successful exploit could allow the attacker to eavesdrop on ongoing conversations taking place around the device. When an affected device is exploited, the phone exhibits visual signs that indicate that something is amiss.  An exploited device will illuminate the speakerphone button, and devices with LCD displays will show an off hook indication.  These factors along with the attacker requiring access to the VoIP network or VLAN significantly reduce the likelihood of an attack.","severity":"Medium","published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190/csaf/Cisco-SA-20071128-CVE-2007-6190.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":11,"public_evidence_count":11,"kev_count":0,"highest_epss":0.01036},"cves":[{"id":"CVE-2007-6190","kev":false,"epss":{"score":0.01036,"percentile":0.60106,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Unified IP Phone 7906G","slug":"cisco-unified-ip-phone-7906g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7906G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":1},{"product":{"name":"Cisco Unified IP Phone 7911G","slug":"cisco-unified-ip-phone-7911g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7911G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":2},{"product":{"name":"Cisco Unified IP Phone 7931G","slug":"cisco-unified-ip-phone-7931g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7931G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":3},{"product":{"name":"Cisco Unified IP Phone 7941G","slug":"cisco-unified-ip-phone-7941g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7941G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":4},{"product":{"name":"Cisco Unified IP Phone 7942G","slug":"cisco-unified-ip-phone-7942g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7942G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":5},{"product":{"name":"Cisco Unified IP Phone 7945G","slug":"cisco-unified-ip-phone-7945g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7945G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":6},{"product":{"name":"Cisco Unified IP Phone 7961G","slug":"cisco-unified-ip-phone-7961g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7961G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":7},{"product":{"name":"Cisco Unified IP Phone 7962G","slug":"cisco-unified-ip-phone-7962g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7962G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":8},{"product":{"name":"Cisco Unified IP Phone 7965G","slug":"cisco-unified-ip-phone-7965g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7965G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":9},{"product":{"name":"Cisco Unified IP Phone 7970G","slug":"cisco-unified-ip-phone-7970g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7970G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":10},{"product":{"name":"Cisco Unified IP Phone 7971G","slug":"cisco-unified-ip-phone-7971g","vendor":"Cisco"},"cve":{"id":"CVE-2007-6190"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T05:17:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Unified IP Phone 7971G","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01036,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2007-11-28T20:50:06Z","updated_at":"2007-11-28T20:50:06Z","advisory_updated_at":"2007-11-28T20:50:06Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20071128-CVE-2007-6190","row_display_order":11}]}